solution

commandes.md

@@ -0,0 +1,27 @@
+sudo dnf install -y openldap-clients openldap-servers &>/dev/null
+sudo systemctl enable --now slapd
+git clone -b solution https://infra.opendoor.fr/git/tom/ldx_configuration
+ldapadd -Y EXTERNAL -H ldapi:/// -f ldx_configuration/root.ldif 
+ldapadd -Y EXTERNAL -H ldapi:/// -f ldx_configuration/acl_monitor_config.ldif 
+echo -n '123Soleil' > ~/.ldap.secret
+chmod 600 ~/.ldap.secret
+sudo vim /etc/profile.d/ldapalias.sh
+source /etc/profile
+echo BASE dc=example,dc=fr | sudo tee /etc/openldap/ldap.conf
+git clone -b solution https://infra.opendoor.fr/git/tom/ldx_customschema
+lda -cf /etc/openldap/schema/cosine.ldif 
+lda -cf /etc/openldap/schema/nis.ldif 
+lda -cf /etc/openldap/schema/inetorgperson.ldif 
+lda -cf /etc/openldap/schema/ppolicy.ldif
+lda -cf ldx_customschema/livre.schema.ldif 
+lda -cf ~formation/fleur_schema.ldif 
+git clone https://infra.opendoor.fr/git/tom/ldx_overlays
+lda -cf ldx_overlays/audit.ldif 
+lda -cf ldx_overlays/unique.ldif 
+git clone https://infra.opendoor.fr/git/tom/ldx_ppolicy
+lda -cf ~formation/racine.ldif 
+lda -cf ldx_ppolicy/overlay_ppolicy.ldif
+rsync -a ldxX.formation.opendoor.fr:/etc/openldap/certs/ca.pem ~
+sudo mkdir -m 2755 /etc/openldap/certs/
+sudo mv ~formation/ca.pem /etc/openldap/certs/
+echo "TLS_CACERT /etc/openldap/certs/ca.pem" | sudo tee -a /etc/openldap/ldap.conf